Pangolin

Key Features

• •Identity-Based SSO Integration: Pangolin integrates with Google, Microsoft, and any OAuth2/OIDC provider, allowing users to connect using existing corporate identities. This eliminates separate credentials and simplifies user lifecycle management while enforcing identity-based access policies.
• •Zero Trust Application Access: Instead of granting network-level access, Pangolin exposes only specific applications—web apps, SSH, RDP, databases, or APIs. This microsegmentation reduces the attack surface and prevents lateral movement even if credentials are compromised.
• •Clientless Browser Access: Users can access SSH, RDP, and VNC resources directly through a web browser without installing any client software. This is ideal for rapid, temporary access on unmanaged devices while still maintaining zero trust verification.
• •Easy Connector Deployment Behind Any Firewall: Pangolin’s lightweight connector establishes outbound-only connections to the control plane, automatically punching through NATs and firewalls without open inbound ports. This simplifies deployment in restricted networks and legacy environments.
• •Peer-to-Peer WireGuard Tunnels: All data between users and resources travels through encrypted, peer-to-peer WireGuard tunnels. This ensures high performance, low latency, and strong encryption without routing traffic through a central gateway.
• •Granular Context-Aware Policies: Administrators can enforce rules based on user identity, device posture, geographic location, and time. For example, access can be restricted to managed devices or blocked from high-risk regions, enhancing security without user friction.
• •Centralized Management Dashboard: The unified dashboard provides real-time visibility into active connections, user sessions, resource health, and audit logs. It simplifies monitoring, troubleshooting, and compliance reporting for IT and security teams.

Use Cases

• •Managed Service Provider (MSP) Multi-Tenant Access: An MSP needs to remotely manage servers and applications across dozens of customer sites. Pangolin allows per-customer resource groups with identity-based access, eliminating VPNs and reducing administrative overhead while maintaining strict isolation.
• •Industrial Remote Access to PLCs and SCADA: A manufacturing company requires secure remote access to programmable logic controllers and SCADA systems behind restrictive firewalls. Pangolin’s connector deploys easily without open ports, providing browser-based RDP or SSH access to field devices.
• •Secure Developer Access to Staging Environments: A DevOps team gives developers temporary, zero trust access to staging servers via browser-based SSH. Pangolin verifies identity and context, and sessions are automatically logged for audit. No VPN or SSH key management is needed.
• •IoT Device Provisioning at Scale: An IoT fleet operator needs to deploy and manage thousands of edge devices. Pangolin’s golden edge image and remote node capabilities allow secure, policy-based access to each device without exposing them to the public internet.
• •Enterprise SSH Access Modernization: A large enterprise wants to replace shared SSH keys with identity-based, audited access. Pangolin’s certificate-based SSH and identity-aware proxy provide per-user, time-limited access with full session recording and compliance reporting.

Who is this for?

Pangolin is designed for IT administrators, DevOps engineers, security professionals, and managed service providers (MSPs) who manage hybrid, multi-cloud, or edge infrastructure. It is particularly valuable for organizations seeking to replace traditional VPNs with a zero trust remote access model, reduce network attack surface, and enforce granular identity-based policies. Teams handling compliance requirements, such as SOC 2, HIPAA, or PCI, will benefit from Pangolin’s audit trails and microsegmentation. It also suits industrial environments needing secure remote access to PLCs, SCADA, and IoT devices without opening firewall ports.